CVE-2017-5351

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-01-12 · updated 2026-06-17
Weakness: CWE-400

Description

Samsung Note devices with KK(4.4), L(5.0/5.1), and M(6.0) software allow attackers to crash the system by creating an arbitrarily large number of active VR service threads. The Samsung ID is SVE-2016-7650.

Affected products

Samsung Mobile: 4.4, 5.0, 5.1, 6.0

References

http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017
http://www.securityfocus.com/bid/95418
http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2017
http://www.securityfocus.com/bid/95418

Get alerted when CVE-2017-5351 or the next vulnerability affects your stack